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AMENDMENTS TO THE CLAIMS 

The following is a complete, marked-up listing of revised claims with a status 
identifier in parenthesis, underlined text indicating insertions, and strike through 
and/or double -bracketed text indicating deletions. 

Listing Of Claims 

1 . (Currently Amended) Authentication method of at least one application 
working in a — an equipment connected by a network to a control server, said 
equipment being locally connected to a security module, said application being at 
least one of loadable and executable via an application execution environment of 
the equipment and being adapted to use resources stored in the security module, 
the method comprising: 

rec e ption receiving by the control server, via the network, o£ -identification 
data comprising at least the -an identifier of the equipment and the identifier of the 
an identifier of the security module, 

analysis and verification analyzing and verifying by the control server ef 
sa Msaid the identification data, 

gen e ration of generating by the control server a cryptogram comprising a 
digest of the application, the identification data identify i ng the equipment and th e 
security modul e and instructions intended for said -the security module. 

transmission of said transmitting the cryptogra m by the control server , via 
the network and the equipment, to the security module, and 

v e rification of v erifving by the security module the application by comparing 
the digest extracted from the received cryptogram r e c e iv e d w ith a digest determined 
by the security module, wherein, during at least one of initialization and activation 
of the application, the security module executes the instructions extracted from the 
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cryptogram and at least one of releases and blocks access to certain resources of 

said security module according to a result of the verification specific to the ouited to 

this application previously obtained carried out pr e viously . 

2. (Previously Presented) Method according to claim 1 wherein the 
equipment is a mobile equipment of mobile telephony. 

3. (Previously Presented) Method according to claim 1 wherein the network 
is a mobile network of at least one of the type GSM, GPRS, UMTS. 

4. (Currently Amended) Method according to claim 1 , wherein the security 
module is a subscriber module inserted into the mobile equipment of mobile 
telephony of fee-aJSIM card type. 

5. (Currently Amended) Method according to claim 4 wherein the 
identification data of at least one of the set mobile equipment and subscriber 
module is carried out from th e comprises an identifier of the mobile equipment and 
from th ean identifier of the subscriber module suited pertaining to a subscriber to 
the network. 

6. (Previously Presented) Method according to claim 1 wherein the 
instructions included in the cryptogram received by the security module condition 
the use of the applications according to criteria established previously by at least 
one of the operator, the application supplier and the user of the equipment. 

7. (Currently Amended) Method according to claim 6 wherein the criteria 
define limits of use of an -the application according to fee-risks associated with at 
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least one of the software of said — the application and with the hardware of the 

equipment that the operator desires to take into account. 

8. (Currently Amended) Method according to claim 1 wherein the 
verification of the application with the cryptogram is carried out at the time of at 
least one of the first initialization and the first use of said- the application. 

9. (Previously Presented) Method according to claim 1 wherein the 
verification of the application with the cryptogram is periodically carried out at a 
given rate according to instructions originating from the control server. 

10. (Previously Presented) Method according to claim 1 wherein the 
verification of the application with the cryptogram is carried out at the time of each 
initialization of said application on the equipment. 

11. (Currently Amended) Method according to claim 1 wherein the 
cryptogram is generated with the aid of an asymmetrical or symmetrical encryption 
key from a data set containing, among other data, the identifier of the equipment, 
the identifier of the security module, an identifier of the application, the digest of 
the application calculated with an unidirectional hash function^ and-identifiers of 
the resources of the security module and instructions for locking/r e l e asing 
e fblocking or releasing resources of the security module. 

12. (Currently Amended) Method according to claim 11 wherein the 
cryptogram includes a variable that is predictable by the security module avoiding 
the double use of a same cryptogram, the value of said variable being controlled by 
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the security module by making a comparison with that of a reference value stored 

in saM -the security module and regularly updated. 

13. (Currently Amended) Method according to claim 1 wherein the security 
module transmits to the control server, via the equipment and the network, a 
confirmation message when said- the security module has accepted or refused a 
cryptogram of an application. 

14. (Previously Presented) Method according to the claim 1 wherein the 
cryptogram is transmitted to the security module at the same time as the 
application is loaded into the equipment via the execution environment of the 
applications. 

15. (Previously Presented) Method according to claim 1 wherein the 
application, once loaded into the equipment from the control server via the 
network, requests a cryptogram from the server at the time of its initialization and 
transmits said cryptogram to the security module, the confirmation message of 
acceptance or refusal of the cryptogram being transmitted by the security module 
to the server via the application. 

16. (Previously Presented) Method according to claim 1, wherein the 
equipment is a Pay-TV decoder or a computer to which the security module is 
connected. 

17. (Currently Amended) Security module comprising resources intended to 
be accessed locally by at least one application installed in an equipment connected 
to a network, said equipment including means for reading and transmitting data 
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including at least an identifier of the equipment and an identifier of the security 

module, said security module further comprising means for reception, storage and 

analysis of a cryptogram containing among other data, a digest of said application 

and instructions, means for verification of said application, and means for 

extraction and execution of the instructions contained in the cryptogram, for at 

least one of releasing and blocking certain resources according to the result of the 

verification of the application. 

18. (Previously Presented) Security module according to claim 17, wherein 
the security module is at least one of the subscriber module and SIM card type 
intended to be connected to a mobile equipment. 

19, (Previously Presented) Method according to claim 2, wherein the security 
module is a subscriber module inserted into the mobile equipment of mobile 
telephony of the SIM card type. 

*** END CLAIM LISTING *** 
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